Privacy Policy
Last updated: March 6, 2026
OpenClaw ("we," "us," or "our") operates cloud.getopenclaw.ai. This Privacy Policy explains how we collect, use, and protect your information.
1. Information We Collect
Account Information
Email address, name, and profile picture via Google OAuth.
Billing Information
Payment is processed by Stripe. We do not store credit card numbers. We store your Stripe customer ID and subscription status.
Technical Data
IP address and browser user agent (for authentication and security), instance usage data (container status, subdomain, deployment timestamps), and API keys you provide (encrypted at rest using AES-256-GCM).
Communications
Emails you send to support@getopenclaw.ai.
2. How We Use Your Information
We use your data to provide and operate the Service, process payments, provision and manage your cloud Instance, send transactional emails, respond to support requests, and detect and prevent fraud. We do not sell your personal data to third parties.
3. Third-Party Services
| Service | Purpose |
|---|---|
| Supabase | Database and authentication |
| Stripe | Payment processing |
| OAuth login | |
| Vercel | Hosting and analytics |
| AI providers (Anthropic, OpenAI, Google) | Via your own API keys only |
Your AI provider API keys are stored encrypted and used solely to configure your Instance. We do not transmit them to third parties other than to provision your server.
4. Data Retention
Active account data is retained as long as your account exists. Upon account deletion or subscription cancellation, your Instance and associated data are permanently deleted within 30 days. Billing records may be retained for up to 7 years for legal and tax purposes.
5. Security
We implement industry-standard security measures including AES-256-GCM encryption for stored API keys, TLS encryption for all data in transit, and SSH host key verification for server access. No system is completely secure and we cannot guarantee absolute security.
6. Your Rights (GDPR)
If you are located in the European Economic Area, you have the right to access, correct, delete, or port your personal data, and to object to or restrict processing. Contact us at support@getopenclaw.ai. We will respond within 30 days.
7. Children
The Service is not directed at children under 16. We do not knowingly collect data from children.
8. Changes
We may update this Privacy Policy. We will notify you of significant changes by email. Continued use constitutes acceptance.